CVE-2005-2676

Published: Aug 23, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data.

Affected (9)

Products: Coppermine: Coppermine Photo Gallery

Coppermine

1 product

Coppermine Photo Gallery

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Coppermine Coppermine Photo Gallery	Version 1.0_rc3
Coppermine Coppermine Photo Gallery	Version 1.1_.0
Coppermine Coppermine Photo Gallery	Version 1.1_beta_2
Coppermine Coppermine Photo Gallery	Version 1.2.1
Coppermine Coppermine Photo Gallery	Version 1.2.2_b
Coppermine Coppermine Photo Gallery	Version 1.2
Coppermine Coppermine Photo Gallery	Version 1.3.2
Coppermine Coppermine Photo Gallery	Version 1.3.3
Coppermine Coppermine Photo Gallery	Version 1.3